Page 1 of 2 12 LastLast
Results 1 to 10 of 11

Thread: Sweet thread about ipw2200 packet injection and monitor mode

  1. #1
    Just burned his ISO DementiaPraecox's Avatar
    Join Date
    Feb 2011
    Posts
    9

    Default Sweet thread about ipw2200 packet injection and monitor mode

    So here I am again asking cliched quetions about topic that appeared so many times in forums.

    Seriously: Is there any way to use Intel/Pro Wireless 2200 BG on BackTrack 5??

    As far as I know BackTrack 2 was last system that supported this card (why?).
    And yes, I read many artices that deal with this problem but found nothing worked for me.

    Only thing that worked was downloading firmware (why is it absent on BT5?), so I managed to turn card on and connect tos. APBut I can't inject packets or even turn it to monitor mode (not counting 'iwconfig' that does nothing at all 'cause as soon as I execute 'airodump-ng' card change back to "managed" mode and stop listening).

    1) airmon-ng constanly shows: 'ERROR while getting interface flags: No such device' but in dmesg everything's ok (no errors or other stuff)
    2) rmmod and modprobe aren't help
    3) rtap_iface in iwconfig shows: 'no wireless extensions', and I can't change its parameters. When trying 'ifconfig rtap0 up' system lock up. Doing this 'echo 1 > sys/bus/.../rtap_iface' also doesn't help
    4) this combination of 'rtap0 eth1' and vice versa does nothing
    5) airdriver-ng detects card but 'reload' parameter returns something about drivers not found in some non-existent directory
    6) and that injection patch in 'pentest/aircrack/' I can't get it to work: Some HUNK:failed errors
    7) downloading linux-headers and linux-source isn't helping

    And one question off topic: I tried rt73 card on bt5.iso installed on laptop and downloadable vmware version and executing 'locate rt73' on both threw slightly different results. On vmware *.ko files were in /lib/... directory AND also in 'linux-source' directory, but on laptop were only in /lib/... though I used 'apt-get install' to I-hope-install linux-source on laptop. Why is that??

    I have Dell D610.
    Could some linux-pro (or someone who REALLY knows what's going on) explain why I can't get this card to work and tell me what should I do to set everything properly?

    I'll be very grateful. Thanks to everyone who seriously want to help me.

    FIRMWARE 3.1 IS PRESENT. CARD WORKS WITH CONNECING TO AP's. AIRMON AND AND MONITOR MODE AREN'T WORKING. MANUAL SETTING TO MONITOR LASTS AS FAR AS EXECUTING ANYTHING FROM AIRCRACK SET.

    Sorry for my english.
    Last edited by DementiaPraecox; 06-14-2011 at 04:48 PM.

  2. #2
    Senior Member kidFromBigD's Avatar
    Join Date
    Jan 2010
    Location
    Texas
    Posts
    159

    Default Re: Sweet thread about ipw2200 packet injection and monitor mode

    So, I may have something to offer here. But first I do not run VMWare, but instead use the LiveCDof BT most times. My laptop is also very old (circa 2006) but this should do the job...

    The drivers I use to power my Intel 2200 chipset are from: http://ipw2200.sourceforge.net/

    Use the latest version. Unpack them, place all the *.fw files into your BT5 in /lib/firmware and once you do that try:
    Code:
    modprobe -r ipw2200
    modprobe ipw2200
    airmon-ng start eth1
    airodump-ng -w cap eth1
    I can only say what worked for me.

    Hope this helps.
    You. Are. Doing. It. Wrong.
    -Gitsnik

  3. #3
    Good friend of the forums gunrunr's Avatar
    Join Date
    Jan 2010
    Location
    shining my spoon
    Posts
    265

    Default Re: Sweet thread about ipw2200 packet injection and monitor mode

    Yeah search my posts there's one with a link and pasted direction worthy of my spoonfeeding expertise.
    Wielder of the spoon of doom
    Summercon, Toorcon, Defcon, Bsides, Derbycon, Shmoocon oh my
    Come hang out with hackers on twitter @gunrunr556

  4. #4
    Just burned his ISO DementiaPraecox's Avatar
    Join Date
    Feb 2011
    Posts
    9

    Default Re: Sweet thread about ipw2200 packet injection and monitor mode

    Sorry I wrote it little unclearly, I already have installed firmware 3.1, but problems mentioned above exist anyway.

  5. #5
    Good friend of the forums gunrunr's Avatar
    Join Date
    Jan 2010
    Location
    shining my spoon
    Posts
    265

    Default Re: Sweet thread about ipw2200 packet injection and monitor mode

    But you are definitly not using a virtual machine to run bt5 right? Just cause when I read your post I aww it mentioned. If you have a hdd install or a flash install it should work with at.least the arp replay attack. But it will never ever work with.any virtual machine
    Wielder of the spoon of doom
    Summercon, Toorcon, Defcon, Bsides, Derbycon, Shmoocon oh my
    Come hang out with hackers on twitter @gunrunr556

  6. #6
    Just burned his ISO DementiaPraecox's Avatar
    Join Date
    Feb 2011
    Posts
    9

    Default Re: Sweet thread about ipw2200 packet injection and monitor mode

    No I have Dell D610 with only BT5 installed on HDD. But airmon can't get in to work "No such device". I managed somehow to collect the packets with mannually changing to monitor mode with iwconfig but executing any program from aircrack set instantly changes it to "managed" mode, so I keep switching it to monitor and that how it's work. But test ( -9) and Chopchop doesn't work. I tried to catch packets with wireshark to see if they're malformed 'cause on other device it worked and I knew what's going on but with my ipw2200 there's no malformed packets but injecting doesn't work. Why airmon throws this "no such device", dmesg shows no errors, and I can use this card to connect to AP so it definitely works.
    And what's funny about it, I have another card on rt73 chipset and when I plug it in dmesg alwasy says "Device not ready" or something like that but I can connect to AP, and after manually changing to any channel all packet injection methods work. Somehow aireplay pick at random channel and says that this particular AP is not on this channel unless I mannualy pick some channel once, and after that aireplay has no problems with targeting AP whatever channel they're on. But this card is so weak there's no point using it anyway. That's a little digression.

    Concluding:

    Besides some strange behavior of rt73 that showed up on BT5, this card woks fine, airmon puts it to monitor mode without errors and all injection methods work, but card is weak as sh*t and completely useless.
    ipw2200 has quite a range, dmesg shows everything is good, but airmon throws "no such device", monitor mode is very volatile when comes to using anything that starts with 'air' and ends with '-ng', and wireshark shows no malformed packets (come to think it's shows no packets coming out of this card).

  7. #7
    Junior Member
    Join Date
    Feb 2011
    Location
    NE USA
    Posts
    39

    Default Re: Sweet thread about ipw2200 packet injection and monitor mode

    Have you considered updating your NIC? From a budget of about $50, I was able to get an external ALFA AWUS036H USB dongle and also an Intel ABGN 4965 integrated Wifif card that both support packaet injection. Rather than spinning my wheels as to why the OEM NIC did not inject, I just got the funds to make the upgrade and be done with the issue. If you have trouble integrating any NICs into your older system, the people on the "My Digital Life" forums do a great job modifying BIOS drivers to remove whitelist NICs. HP is a big proponent of the "whitelist" which basically a list that only includes NICs of manufacturers that send royalties to HP. My BIOS no longer honors this.

  8. #8
    Just burned his ISO DementiaPraecox's Avatar
    Join Date
    Feb 2011
    Posts
    9

    Default Re: Sweet thread about ipw2200 packet injection and monitor mode

    Quote Originally Posted by freemyggle View Post
    Have you considered updating your NIC? From a budget of about $50, I was able to get an external ALFA AWUS036H USB dongle and also an Intel ABGN 4965 integrated Wifif card that both support packaet injection. Rather than spinning my wheels as to why the OEM NIC did not inject, I just got the funds to make the upgrade and be done with the issue. If you have trouble integrating any NICs into your older system, the people on the "My Digital Life" forums do a great job modifying BIOS drivers to remove whitelist NICs. HP is a big proponent of the "whitelist" which basically a list that only includes NICs of manufacturers that send royalties to HP. My BIOS no longer honors this.
    OK. If it was that easy I'd have it already. In USA it's just $50 but in my country on the other hand the same card costs equivalent of $250 for you, and I'm not talking about buying in abroad and shipping it in. It's just the "normal" prices where I live. Everyting is 3-4 times more expensive than anywhere in this planet. So either way it'd cost me far more than it should. Of course if I have a chance of buying it for reasonable price I'll do it, but for now I'm stuck with what I have.
    Last edited by bolexxx; 06-17-2011 at 02:11 PM. Reason: it will take as long as it takes

  9. #9
    Just burned his ISO
    Join Date
    Jun 2011
    Location
    UK
    Posts
    1

    Default Re: Sweet thread about ipw2200 packet injection and monitor mode

    I am in the same situatiuon as DementiaPraecox with the same Laptop a D610, after pasting in the Firmware(3.1) into lib/firmware

    then rmmod ipw2200
    then modprobe ipw2200

    iwconfig shows

    root@root- iwconfig
    lo no wireless extensions.

    eth0 no wireless extensions.

    eth1 IEEE 802.11abg ESSID:off/any
    Mode:Managed Channel:0 Access Point: Not-Associated
    Bit Rate:0 kb/s Tx-Power=20 dBm Sensitivity=8/0
    Retry limit:7 RTS thr:off Fragment thr:off
    Encryption key:off
    Power Management:off
    Link Quality:0 Signal level:0 Noise level:0
    Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
    Tx excessive retries:0 Invalid misc:0 Missed beacon:0

    after this airmon-ng shows, as well as trying to start eth1 i get :mon0: ERROR while getting interface flags: No such device




    Interface Chipset Driver

    eth1 Intel 2200BG/2915ABG ipw2200 - (phy10)



    root@root- airmon-ng start eth1


    Found 2 processes that could cause trouble.
    If airodump-ng, aireplay-ng or airtun-ng stops working after
    a short period of time, you may want to kill (some of) them!

    PID Name
    2243 dhclient3
    4059 dhclient3
    Process with PID 4059 (dhclient3) is running on interface eth1


    Interface Chipset Driver

    eth1 Intel 2200BG/2915ABG ipw2200 - [phy10]mon0: ERROR while getting interface flags: No such device

    (monitor mode enabled on mon0)

    Any help would be greatly apreciated, thanks all.



    ------------
    was forced to remove some formatting because of this error on my post

    You have included a total of 5 images and/or videos in your message. The maximum number that you may include is 4. Please correct the problem and then continue again.

    Images include use of smilies, the BB code [img] tag, and HTML <img> tags. Videos are included with the BB code [video] tag. The use of these is all subject to them being enabled by the administrator.

  10. #10
    Just burned his ISO DementiaPraecox's Avatar
    Join Date
    Feb 2011
    Posts
    9

    Default Re: Sweet thread about ipw2200 packet injection and monitor mode

    Greytega

    I somehow managed to maintain aircrack tools working without using airmon. Normally card is in 'managed' mode and that causes aircrack tools to freeze after few seconds. Turns out it's 'Wicd' guilty of that. Instead of fighting with airmon it's better to shutdown 'Wicd' in task manager and then switch to monitor mode with 'iwconfig' and then use aircrack tools. With 'Wicd' not working there's no freezes in airodump, even when you simultaneously execute another aircrack tools. But only I managed to get to work ARP replay attack (-3).

    And there's a question: Is there a way to execute 'fakeauth attack' (-2) with ipw2200 ?? Maybe I'm wrong but is association to AP require packet injecting??

    And last question:

    Code:
     [CH 11 ][ BAT: 1 hour 56 mins ][ Elapsed: 44 s ][ 2011-06-20 21:50                                    
                                                                                                          
     BSSID              PWR RXQ  Beacons    #Data, #/s  CH  MB   ENC  CIPHER AUTH ESSID                   
                                                                                                                    
     00:18:39:**:**:**   -1   0        0        0    0 158  -1                    <length:  0>     What's that and how can I make it??

    PS: One time I put my laptop to sleep with 'System settings' panel open and since then every time I turn laptop on this System settings panel shows up. I guess it's stuck somewhere in autorun script or something. How can I turn it off, and why did it happen?

Page 1 of 2 12 LastLast

Similar Threads

  1. ipw2200+monitor mode+packet injection
    By Crowİ in forum Angolo dei Newbie
    Replies: 1
    Last Post: 09-03-2009, 04:35 PM
  2. ipw2200 and monitor mode
    By Crowİ in forum OLD Newbie Area
    Replies: 5
    Last Post: 03-03-2009, 01:40 PM
  3. IPW2200 Packet injection
    By Wilson08 in forum OLD Newbie Area
    Replies: 3
    Last Post: 12-29-2008, 07:52 PM
  4. Replies: 5
    Last Post: 10-09-2008, 11:33 AM
  5. Injection test: in manged mode or in monitor mode?
    By john99 in forum OLD Newbie Area
    Replies: 2
    Last Post: 05-02-2008, 11:03 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •